Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa
File:                     e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa (raw, json)
Hash identifier:          Thy8WphKdcNzU/vtClxgKBErp5fQ+TEi3SQ9a4unzoE=
Subject key identifier:   40:C3:9F:EE:E6:C9:A2:F0:97:D0:21:6B:EB:04:F0:BA:04:DB:17:BB
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AFBA309F07180C938F480D80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa
Signing time:             Mon 27 Jan 2025 18:48:30 +0000
ROA not before:           Mon 27 Jan 2025 18:48:30 +0000
ROA not after:            Sun 27 Apr 2025 17:48:30 +0000
asID:                     15164
IP address blocks:        173.244.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:ba:30:9f:07:18:0c:93:8f:48:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 18:48:30 2025 GMT
            Not After : Apr 27 17:48:30 2025 GMT
        Subject: CN=fca2634f-df50-4e6c-a6d9-3029ea879326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:6c:ad:a1:b9:e9:81:e2:aa:c8:96:18:b7:
                    02:4c:e1:01:59:4a:fe:09:c0:93:82:3a:3d:76:82:
                    3e:7a:48:ae:9a:ee:4b:d9:cc:56:bd:d7:d7:ca:21:
                    f8:b3:51:95:a7:43:73:ff:ff:d1:9e:22:4e:76:64:
                    af:aa:a4:d4:37:3a:b9:54:42:45:91:90:d2:58:ea:
                    75:56:25:38:a8:3e:11:c4:9b:a4:7a:89:cb:41:a0:
                    55:9b:cf:7c:05:7b:36:d3:42:b3:50:50:7a:c6:af:
                    5c:e4:ed:bd:6e:98:f8:f1:90:3b:de:76:4b:9d:20:
                    26:86:57:29:a6:ab:92:e7:65:32:5d:8e:7b:1f:02:
                    10:c7:65:72:a1:b3:f8:70:35:e9:b1:f4:50:a5:5e:
                    d9:aa:34:3b:db:ed:c3:b2:30:2e:22:10:65:e8:f3:
                    53:76:69:eb:93:be:aa:f7:84:60:66:1b:36:7f:fd:
                    e6:2e:a3:50:8d:45:b0:38:68:36:c8:e0:23:ff:09:
                    1a:d0:bb:e4:91:db:7d:8c:2c:c3:85:cf:cf:ed:e9:
                    8b:68:33:4a:c3:bc:f7:bc:72:9a:b4:00:0b:3a:ac:
                    8b:de:b6:2d:12:25:d5:ec:bd:37:8f:4c:62:a3:76:
                    9b:dc:d8:9d:26:1d:76:e9:98:23:5d:f0:71:55:ec:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:9F:EE:E6:C9:A2:F0:97:D0:21:6B:EB:04:F0:BA:04:DB:17:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:50:8d:df:c7:59:74:5d:89:32:ff:41:aa:a5:1b:00:ab:
         17:a7:59:16:4d:4a:6b:86:15:f0:aa:c8:1d:fe:6b:40:bc:76:
         f1:78:4b:08:5c:16:34:dc:28:a0:87:ab:76:e9:67:1c:a9:11:
         c6:ef:0b:1e:99:78:6e:97:47:bf:25:53:03:b9:67:3f:73:48:
         ce:03:67:94:9f:25:53:d3:8c:f4:2d:e1:ca:8e:53:8d:c7:a3:
         cf:9b:d6:0a:fd:af:1f:45:d2:2f:91:23:01:25:53:b3:12:19:
         41:a6:35:cd:d5:4e:a3:20:91:bb:bb:61:09:0a:f8:a5:9c:63:
         7c:2d:ac:df:be:c4:bf:4d:0d:9a:fe:a0:9a:1c:7b:94:9e:1e:
         56:af:f4:63:88:bd:69:7f:c7:3d:cd:91:0e:ee:92:1b:38:4a:
         b7:2c:b5:cc:29:79:77:7c:e6:be:ce:9b:8a:c7:4c:b8:36:44:
         b9:69:5a:3e:8b:8e:37:47:73:08:b3:82:3d:81:48:4e:f3:76:
         02:c3:6b:e3:b2:28:86:c1:ee:12:12:8c:ae:dd:5e:ec:d4:9f:
         72:dc:8d:3d:38:c1:16:d6:29:88:e5:d7:5c:08:f7:de:8c:5e:
         07:30:43:2c:31:92:af:1d:fe:74:81:28:e4:4d:3c:66:73:2d:
         bf:79:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:20 2025 by rpki-client